performing-threat-modeling-with-owasp-threat-dragon

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's runtime Docker command ("docker run ... owasp/threat-dragon:latest") pulls and executes a remote container image (owasp/threat-dragon:latest) from Docker Hub, which is remote code fetched and executed at runtime.